Lucene search
+L

628 matches found

CNNVD
CNNVD
•added 2021/03/25 12:00 a.m.•14 views

Esri Arcgis Server 代码问题漏洞

ArcGIS Server is the back-end server software component of ArcGIS Enterprise from Esri that makes your geographic information available to others in your organization, and optionally makes it available to anyone with an Internet connection. A buffer overflow vulnerability exists in Esri ArcGIS...

6.8CVSS6.7AI score0.01002EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/03/25 12:00 a.m.•11 views

PT-2021-18081 · Esri · Esri Arcgis Server

Name of the Vulnerable Software and Affected Versions: Esri ArcGIS Server versions 10.8.1 and earlier Description: A use-after-free issue occurs when parsing a specially crafted file, allowing an authenticated attacker with specialized permissions to achieve arbitrary code execution in the contex...

6.8CVSS6.7AI score0.00948EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/03/25 12:00 a.m.•13 views

Esri ArcGIS Server 资源管理错误漏洞

ArcGIS Server is the back-end server software component of ArcGIS Enterprise from Esri that makes your geographic information available to others in your organization, and optionally makes it available to anyone with an Internet connection. A post-release reuse vulnerability exists in Esri ArcGIS...

6.8CVSS6.4AI score0.00948EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/25 12:00 a.m.•3 views

CVE-2021-29094: Buffer Copy without Checking Size of Input

Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

6.8CVSS6.6AI score0.01002EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/25 12:00 a.m.•2 views

CVE-2021-29093: Use After Free

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

6.8CVSS6.6AI score0.00948EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/03/25 12:00 a.m.•13 views

PT-2021-18082 · Esri · Esri Arcgis Server

Name of the Vulnerable Software and Affected Versions: Esri ArcGIS Server versions 10.8.1 and earlier Description: The issue arises from multiple buffer overflow vulnerabilities when parsing a specially crafted file, allowing an authenticated attacker with specialized permissions to achieve...

6.8CVSS7AI score0.01002EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/03/25 12:00 a.m.•16 views

PT-2021-18083 · Esri · Esri Arcgis Server

Name of the Vulnerable Software and Affected Versions: Esri ArcGIS Server versions 10.8.1 and earlier Description: The issue arises from multiple uninitialized pointer vulnerabilities when parsing a specially crafted file. This allows an authenticated attacker with specialized permissions to...

6.8CVSS6.9AI score0.00883EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/03/25 12:00 a.m.•20 views

Esri 多款产品缓冲区错误漏洞

ESRI ArcGIS Enterprise and so on are the products of the U.S. Environmental Systems Research Institute ESRI, Inc. ArcGIS Enterprise is a set of GIS geographic information system basic software system. Esri Arcgis Server and so on are the products of the U.S. Esri Esri, Inc. Server is a Web-orient...

7.8CVSS6.8AI score0.01952EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/03/25 12:00 a.m.•25 views

Esri ArcGIS Server 缓冲区错误漏洞

Esri Arcgis Server is the United States Esri company's a Web-oriented can be used to provide geographic location services, enterprise-class software platform. A buffer overflow vulnerability exists in Esri ArcGIS Server 10.8.1 and earlier, which can be exploited by an attacker to achieve arbitrar...

6.8CVSS6.8AI score0.00883EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/25 12:00 a.m.•3 views

CVE-2021-29095: Access of Uninitialized Pointer

Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

6.8CVSS6.3AI score0.00883EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2021/03/16 4:00 a.m.•6 views

CVE-2021-29094

Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

6.8CVSS7.5AI score0.01002EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/03/16 4:00 a.m.•8 views

CVE-2021-29095

Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

6.8CVSS7.2AI score0.00883EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2021/03/16 4:00 a.m.•9 views

CVE-2021-29093

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

6.8CVSS7.3AI score0.00948EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/02/06 12:00 a.m.•11 views

ArcGIS Server has an Arbitrary File Read Vulnerability

ArcGIS Server is ESRI released to provide Web-oriented spatial data services for an enterprise-class GIS software platform. ArcGIS Server has an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2020/12/28 12:00 a.m.•16 views

Esri Arcgis Server Server-Side Request Forgery Vulnerability

Esri Arcgis Server is the United States Esri company's a Web-oriented can be used to provide geographic location services, enterprise-class software platform. A security vulnerability exists in Esri ArcGIS Server versions prior to 10.8, which stems from a configuration that does not adequately...

9.8CVSS6.7AI score0.01665EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/26 12:15 a.m.•30 views

CVE-2020-35712

Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations...

9.8CVSS9.4AI score0.01665EPSS
SaveExploits0References2
OSV
OSV
•added 2020/12/26 12:15 a.m.•17 views

CVE-2020-35712

Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations...

9.8CVSS7.3AI score0.01665EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/12/25 11:46 p.m.•33 views

CVE-2020-35712

Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations...

9.4AI score0.01665EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/25 12:00 a.m.•8 views

CVE-2020-35712: Server-Side Request Forgery (SSRF)

Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations...

9.8CVSS5.8AI score0.01665EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2020/12/25 12:00 a.m.•19 views

Esri Arcgis Server 代码问题漏洞

Esri Arcgis Server is the United States Esri company's a Web-oriented can be used to provide geographic location services, enterprise-class software platform. A security vulnerability exists in Esri ArcGIS Server versions prior to 10.8, which stems from a configuration that does not adequately...

9.8CVSS7.3AI score0.01665EPSS
SaveExploits0References4
Rows per page
Query Builder